CVE-2025-7485

Katalog CVE

CVSS 3.3 · Low EPSS 0,25%

Kerentanan Reachable Assertion pada open5gs. Skor CVSS 3.1 3.3 (Low) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability classified as problematic was found in Open5GS up to 2.7.3. Affected by this vulnerability is the function ngap_recv_handler/s1ap_recv_handler/recv_handler of the component SCTP Partial Message Handler. The manipulation leads to reachable assertion. The attack needs to be approached locally. The patch is named cfa44575020f3fb045fd971358442053c8684d3d. It is recommended to apply a patch to fix this issue.

Rincian

Terbit di NVD

12 Juli 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.3 (Low), sumber vuldb.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 14,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/open5gs/open5gs/commit/cfa44575020f3fb045fd971358442053c8684d3d patch
• https://github.com/open5gs/open5gs/issues/3878/ exploit · issue tracking · advisory pihak ketiga
• https://vuldb.com/?ctiid.316135 permissions required · advisory pihak ketiga · vdb entry
• https://vuldb.com/?id.316135 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.610601 advisory pihak ketiga · vdb entry
• https://github.com/open5gs/open5gs/issues/3878#issuecomment-2853775136 issue tracking